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WHAT IS CLAIMED IS: 
J . A system for remote configuration of a transaction processing device, 
comprising: 

a transaction processing device for providing a network service; and 
a remote configuration server, wherein said configuration server is capable of 
communicating securely with said transaction processing device via a public communications 
network, wherein said transaction processing device is capable of communicating securely 
with said configuration server via said public network, and wherein said transaction 
processing device \s capable of being remotely configured by said configuration server via 
said public communications network. 



2. The system of claim 1, wherein said transaction processing device comprises: 
a first cryptographic services module for providing secure communication of 

information from said transaction processing device to said configuration server via said 
public communications necWork. 

3. The system of claim 2, wherein said remote configuration server comprises: 
a second cryptographic\ervices module for providing secure communication of 

information from said configuration server to said transaction processing device via said 
public network. 

4. The system of claim ^wherein said transaction processing device further 
comprises: 

a first communications protocol ijack to facilitate communication over said 
communications network. 



5. The system of claim 1, whereih said transaction processing device 
communicates securely over said public netwoftjc without utilizing a host processor based 
system that is external to said device. 
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6. The system of-c\aim 4, wherein said communications protocol stack is a 
TCP/IP stack. 

7. The system of clairS 4, wherein said configuration server comprises: 
a configuration module, wherein said second cryptographic services module is part of 

said configuration module. 

8. The system of claim 4,\wherein said configuration server comprises: 
a second communications protocol stack to facilitate communication with said 

transaction processing device over said communications network. 

9. The system of claim 8, farmer comprising: 

a certificate manager communicatively connected to said transaction processing 
device, wherein said certificate manager issues a terminal certificate to said transaction 
processing device. 

10. The system of claim 9, wherein s^jd certificate manager issues a server 
certificate to said configuration server. 

11. The system of claim 9, wherein said terminal certificate is stored in said first 
cryptographic services module. 

12. The system of claim 10, wherein said seiner certificate is stored in said second 
cryptographic services module. 



13. The system of claim 11, wherein said terminal certificate is stored in said 
second cryptographic services module. , 
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14. The system of [claim 12, wherein said server certificate is stored in said first 
cryptographic services moduld 



15. The system of claim 11, wherein said first cryptographic services module 
further comprises at least one cryptographic algorithm for encrypting information transmitted 
from said transaction processing jlevice to said configuration server. 



16. The system of claim 12, wherein said second cryptographic services module 
from said configuration server to sard transaction processing device. 



further comprises at least one cryptographic algorithm for encrypting information transmitted 



17. The system of claim 9,\>vherein said certificate manager is part of said 
configuration server. 



18. The system of claim, 9, wherein said configuration server further comprises: 
a security services module, wherein said security services module extracts a public 

key of said transaction processing device from said certificate of said transaction processing 

device to authenticate said transaction processing device. 



19. The system of claim 18, wherein said cryptography services module signs a 
hash of configuration data about said transaction processing device retrieved from a database 
services module of said configuration server witra a private key of the configuration server. 

20. The system of claim 19, wherein saiH signed configuration data is encrypted 
with said extracted public key of said transaction processing device and transmitted to said 
transaction processing device over said public commqjiications network. 



21 . The system of claim 19, wherein said signed configuration data is transmitted 
to said transaction processing device over said public combinations network. 
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22. The system oY claim 20, further comprising: 

a web server for presenting a web based user interface to a user of said transaction 
processing device, wherein sain user can update configuration data stored on said 
configuration server via said web based user interface. 

23. ' The system of clarni 22, wherein said web server comprises a user 
authentication module for verifying; said user of said transaction processing device. 
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24. A method for remotely providing updated configuration information related to 
a subscriber account to qne or more transaction processing devices from a remote server, 
comprising the steps of: 

allowing a subscriber to access a configuration web site of a provider of said 
subscriber account; 

allowing said subscriber to select at least one transaction processing device associated 
with said subscriber account to l>e provided with configuration information; 

receiving updated coijkguratiOn information about said selected transaction 
processing device; 

receiving authorizatibauo'^rov^fe said updated configuration information to said 
selected transaction processm™^vJce^and 

remotely providing sa|^pdated configuration information to said selected transaction 
processing device. 



25. The method of claim 24, wherein said allowing access step comprises the step 



of: 



verifying a username and a\password of said subscriber to authenticate said 
subscriber. 

26. The method of claim ^5, wherein said allowing selection step comprises the 
steps of: 

presenting said subscriber withia list of one or more transaction processing devices 
associated with said subscriber account! and 

allowing said subscriber to seleqf at least one transaction processing device from said 
list of transaction processing devices. 



27. The method of claim 26, further comprising: 

presenting said subscriber with store*} configuration information about said selected 
transaction processing devices. 
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28. The method of claim 27, wherein said receiving updated configuration 
ition step comprises the step of: 

allowing said subscriber to select one or more items from a list of items. 



29. [The method of claim 28, wherein said list of items includes a list of a plurality 
of services and a list of a plurality of software modules. 

30. the method of claim 27, wherein said receiving updated configuration 
information step comprises the step of: 

allowinglsaidNSubscriber to directly update configuration information by adding 
additional information Vbout said subscriber. 



3 1 . The method^of claim 27, wherein said receiving updated configuration 
information step comprises Q^e step of: 

allowing said subscriber to dkectly update configuration information by changing 



existing information 



32. The method bf^laim 24, wherein said updated configuration information 
includes information sertedted from the group consisting of said subscriber's logo, said 
subscriber's business namcn said subscriber's address, said subscriber's telephone number, 
said subscriber's Uniform Resource Locator, said subscriber's fax number, said subscriber's 
email address and said selected transaction processing device's moniker. 



33. The method ^f claim 27, wherein said receiving authorization step further 
comprises the steps of: 

allowing said subscriber to confirm said selected transaction processing devices to be 
provided with configuration information. 
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34. Thepethod of claim 33, wherein said remotely providing step comprises the 



steps of: 



initiating coi 
authenticating s^id 
authenticating 



processing devices 




said confirmed transaction processing devices; 
ed transaction processing devices; 
erver; and 



providing said upckted configuration information to said confirmed transaction 
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35. \ A method for remotely configuring a transaction processing device, 
comprising the steps of: 

authenticating said transaction processing device by a configuration server; 

authenticating said configuration server to said transaction processing device, if said 
configuration servek includes configuration data about said transaction processing device; 

providing sai^ configuration data to said transaction processing device by said 
configuration server; 

storing said prodded configuration data by s^d transaction processing device; 

receiving by said ^onfigiyari^n server an acknowledgment from said transaction 
processing device; and 

storing said received \pforfnationJ)a^uding said configuration data by said 
configuration server. 

36. Themethod of clauk 3$V wherein said authenticating said transaction 
processing device step comprises the^teps of: 

initiating a connection with a communication network by said transaction processing 

device; 

encrypting an identifying token by\said transaction processing device utilizing a 
private key of said transaction processing device; 

transmitting said encrypted identifyingsjoken via said communication network to said 
configuration server; and 

decrypting said received identifying token fty said configuration server utilizing a 
public key of said transaction processing device. 
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37. Theonethod of claim 36, wherein said authenticating said configuration server 
step comprises the steps of: 

encrypting anlidentifying number of said configuration server by said configuration 
server utilizing a private key of said configuration server; 

transmitting said encrypted identifying number via said communication network to 
said transaction processing device; and 

decrypting said received identifying number by said transaction processing device 
utilizing a public key of staid ccmn&uration server. 



38. The method\of 
comprises the steps of: 

encrypting at least a 

and 

transmitting said enci 



laim 37>^vherein ^aid step of providing configuration data 
Sn of said^cohfigifcration data by said configuration server; 
nfiguration data to said transaction processing device. 



39. The method of claim 38, wherein said step of storing said provided 
configuration data further comprises the steps of: 

verifying by said transaction processing device that it is the.intended recipient of said 
received encrypted configuration information; and 

verifying by said transaction processing device that the received encrypted 
information was sent by said configuration server. 



40. The method of claim 35, ^herein said transaction processing device is a point- 
of-sale terminal. 
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